Android Security & Malware

3.85K views21:24

Xiaomi Recording Millions Of People’s ‘Private’ Web And Phone Use
https://www.forbes.com/sites/thomasbrewster/2020/04/30/exclusive-warning-over-chinese-mobile-giant-xiaomi-recording-millions-of-peoples-private-web-and-phone-use

Forbes

Exclusive: Warning Over Chinese Mobile Giant Xiaomi Recording Millions Of People’s ‘Private’ Web And Phone Use

Xiaomi is collecting users’ browser habits and phone usage, raising red flags for privacy researchers.

4.46K views10:42

Android Security & Malware

Forwarded from The Bug Bounty Hunter

AndroPyTool
A framework for automated extraction of static and dynamic features from Android applications

https://github.com/alexMyG/AndroPyTool#how-to-install

GitHub

GitHub - alexMyG/AndroPyTool: A framework for automated extraction of static and dynamic features from Android applications

A framework for automated extraction of static and dynamic features from Android applications - alexMyG/AndroPyTool

460 views16:32

Android Security & Malware

Reverse engineering Flutter apps
Build process of Flutter applications and explain in detail how to reverse engineer the code
https://blog.tst.sh/reverse-engineering-flutter-apps-part-1/

ping's blog

Reverse engineering Flutter apps (Part 1)

Chapter 1: Down the rabbit hole

To start this journey I'll cover some backstory on the Flutter stack and how it works.

What you probably already know: Flutter was built from the ground up with its own render pipeline and widget library, allowing it to…

4.74K views16:49

Android Security & Malware

List of iOS applications related to COVID-19 with capabilities and permissions they request
https://github.com/ivRodriguezCA/Covid19-Mobile-Apps

GitHub

GitHub - ivRodriguezCA/Covid19-Mobile-Apps: List of the most popular COVID10 mobile applications and the permissions they request.

List of the most popular COVID10 mobile applications and the permissions they request. - GitHub - ivRodriguezCA/Covid19-Mobile-Apps: List of the most popular COVID10 mobile applications and the per...

4.04K views08:09

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Android Application Penetration Testing / Bug Bounty Checklist

https://blog.softwaroid.com/2020/05/02/android-application-penetration-testing-bug-bounty-checklist/

457 views17:13

Android Security & Malware

Passionfruit NG: Runtime Application Instruments for iOS
https://github.com/ChiChou/Grapefruit

GitHub

GitHub - ChiChou/grapefruit: (WIP) Runtime Mobile Application Pentest Tool for iOS and Android. Previously Passionfruit

(WIP) Runtime Mobile Application Pentest Tool for iOS and Android. Previously Passionfruit - ChiChou/grapefruit

7.97K views08:40

Android Security & Malware

Hacking/OSCP cheatsheet
https://ceso.github.io/posts/2020/04/hacking/oscp-cheatsheet/

4.85K views12:04

Android Security & Malware

30 Reverse Engineering Tips & Tricks
https://blog.vastart.dev/2020/04/guys-30-reverse-engineering-tips-tricks.html

👍1

4.2K views13:28

Android Security & Malware

Cheatsheets for all vulnerabilities
https://github.com/OWASP/CheatSheetSeries/tree/master/cheatsheets

GitHub

CheatSheetSeries/cheatsheets at master · OWASP/CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics. - OWASP/CheatSheetSeries

4.16K views06:12

Android Security & Malware

Android SLocker uses Coronavirus scare to lock smartphones
https://labs.bitdefender.com/2020/05/android-slocker-variant-uses-coronavirus-scare-to-take-android-hostage/

Bitdefender Labs

Android SLocker Variant Uses Coronavirus Scare to Take Android Hostage

The coronavirus pandemic is an opportunity for criminals who try to take advantage of people’s thirst for information. Unfortunately, Android users can fall prey to... #android #covid19 #ransomware

3.88K views06:30

Android Security & Malware

PENETRATION TESTING PRACTICE LAB - VULNERABLE APPS / SYSTEMS
https://www.amanhardikar.com/mindmaps/Practice.html

3.98K views07:57

Android Security & Malware

Reverse Engineering the Australian Government’s Coronavirus iOS app
https://medium.com/@wabz/reverse-engineering-the-australian-governments-coronavirus-ios-application-c08790e895e9

Medium

Reverse Engineering the Australian Government’s Coronavirus iOS application

On the 29th of March, the Australian Government launched an iOS application on the AppStore. It’s a pretty neat little app with lots of…

4.19K views10:45

Android Security & Malware

Hacking "Razer Pay" e-wallet Android app

Attacker could:
-delete other user's bank account
-extract other user's private info
-possibly steal money from other user's bank account
-read other user's chat messages
https://blog.sambal0x.com/2020/04/30/Hacking-razer-pay-ewallet-app.html

Richard’s Infosec blog

Hacking Razer Pay Ewallet App

Introduction This write-up is about hacking the Razer Pay Android app - an E-Wallet app used in Singapore and Malaysia. It was an interesting journey worth blogging due to the use of some interesting techniques including Frida, a tool that I only thought…

4.8K views11:33

Android Security & Malware

Frida Cheatsheet and Code Snippets for Android
https://erev0s.com/blog/frida-code-snippets-for-android/

Erev0S

Frida code snippets for Android

Quick reference guide for Frida code snippets used for Android dynamic instrumentation.

4.79K views21:30

Android Security & Malware

Offensive Security Bookmarks Collection
https://jivoi.github.io/2015/07/03/offensive-security-bookmarks/

Offensive Security Bookmarks

My security bookmarks collection.

4.65K views06:58

Android Security & Malware

Curated list of Web Security materials and resources
https://github.com/qazbnm456/awesome-web-security

GitHub

GitHub - qazbnm456/awesome-web-security: 🐶 A curated list of Web Security materials and resources.

🐶 A curated list of Web Security materials and resources. - qazbnm456/awesome-web-security

4.69K views11:53

Android Security & Malware

Google Assistant on Pixel devices, was able to capture screenshots even when screens were protected with FLAG_SECURE.
Fixed in September 2019 bulletin
https://pankajupadhyay.in/2020/05/01/ok-google-bypass-flag-secure/

Pankaj Upadhyay

Ok Google! bypass ‘flag_secure’

Google Assistant on Android 9 can bypass the screen-capture protection provided by Android’s FLAG_SECURE.

4.51K views13:32

Android Security & Malware

Aarogya Setu app servers discloses more information then necessary by backend server API.
By changing location you could identify COVID19 infected and unwell people in 500m radius anywhere in India.
https://medium.com/@fs0c131y/aarogya-setu-the-story-of-a-failure-3a190a18e34

Medium

Aarogya Setu: The story of a failure

In order to fight Covid19, the Indian government released a contact mobile application called Aarogya Setu. This application is available…

4.52K views06:56

Android Security & Malware

Oday iOS XML exploit granted an app full access to the entire file system, and more
https://daringfireball.net/linked/2020/05/02/psychic-paper

Daring Fireball

‘Psychic Paper’, an Extraordinarily Powerful But Easily Understood iOS Exploit

Link to: https://siguza.github.io/psychicpaper/

6.63K views17:24

Android Security & Malware

0-click RCE via MMS

Exploited on Samsung Galaxy Note 10+ phone running Android 10
Analysis: https://bugs.chromium.org/p/project-zero/issues/detail?id=2002
PoC: https://youtu.be/nke8Z3G4jnc